☰

域的 pin 规则不匹配

tag-icon • tag-icon certificate outlook windows-10 microsoft-excel pinning
域的 pin 规则不匹配

我在 Windows 事件日志 (Windows 10) 中看到了其中一些日志

05/31/2017 07:44:03 AM
LogName=Application
SourceName=Microsoft-Windows-CAPI2
EventCode=4114
EventType=2
Type=Error
ComputerName=VIE-TABSI-VM.PSC.local
TaskCategory=The operation completed successfully.
OpCode=Info
RecordNumber=276382
Keywords=Classic
Message=Server: outlook.office365.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436.

Mismatch of pin rules for domain: .office365.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ.

Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\EXCEL.EXE_outlook.office365.com.p7b>.

有人知道这条消息会产生什么样的影响吗？我目前面临 Outlook 的随机连接问题和 Excel 的随机崩溃。

以下是过去 7 天事件日志中的错误汇总列表：

Message count   percent
Server: outlook.office365.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436. Mismatch of pin rules for domain: .office365.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ. Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\EXCEL.EXE_outlook.office365.com.p7b>.   147 90.184049
Server: outlook.office365.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436. Mismatch of pin rules for domain: .office365.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ. Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\svchost.exe_outlook.office365.com.p7b>. 7   4.294479
Server: autodiscover-s.outlook.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436. Mismatch of pin rules for domain: .outlook.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ. Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\EXCEL.EXE_autodiscover-s.outlook.com.p7b>.   7   4.294479
Server: outlook.office365.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436. Mismatch of pin rules for domain: .office365.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ. Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\OUTLOOK.EXE_outlook.office365.com.p7b>. 1   0.613497
Server: autodiscover-s.outlook.com has unexpected certificates under trusted authority: <DigiCert> with thumbprint: A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436. Mismatch of pin rules for domain: .outlook.com with effective date: ‎Freitag, ‎14. ‎Oktober ‎2016 17:55:07 and sequence number: 01D2263355B57CAZ. Certificates saved to: <C:\Users\tabsi\AppData\LocalLow\Microsoft\MismatchPinRuleCerts\OUTLOOK.EXE_autodiscover-s.outlook.com.p7b>. 1   0.613497

答案1

如果您的组织已实施企业证书固定，并且指纹为 A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 的证书尚未包含在您的证书列表中，则会发生此类错误。

您可以检查或重新配置企业证书固定策略以包含此证书或其根证书。

供你参考： https://docs.microsoft.com/en-us/windows/access-protection/enterprise-certificate-pinning

相关内容